X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=actions%2Fapistatusesshow.php;h=8b9cc347797bdfeb4b7bbff62def398e354edd2c;hb=ad3b62cf2f857d53113692f5a12adce616f17829;hp=3be22ca59792340cda63914634bf2c37091be5a8;hpb=861e0f02270c43e5303471ae9c419662cac76142;p=quix0rs-gnu-social.git diff --git a/actions/apistatusesshow.php b/actions/apistatusesshow.php index 3be22ca597..8b9cc34779 100644 --- a/actions/apistatusesshow.php +++ b/actions/apistatusesshow.php @@ -29,15 +29,12 @@ * @author Robin Millette * @author Zach Copley * @copyright 2009 StatusNet, Inc. + * @copyright 2009 Free Software Foundation, Inc http://www.fsf.org * @license http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0 * @link http://status.net/ */ -if (!defined('STATUSNET')) { - exit(1); -} - -require_once INSTALLDIR . '/lib/api.php'; +if (!defined('GNUSOCIAL')) { exit(1); } /** * Returns the notice specified by id as a Twitter-style status and inline user @@ -54,10 +51,8 @@ require_once INSTALLDIR . '/lib/api.php'; * @license http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0 * @link http://status.net/ */ - -class ApiStatusesShowAction extends ApiAction +class ApiStatusesShowAction extends ApiPrivateAuthAction { - var $notice_id = null; var $notice = null; @@ -67,10 +62,8 @@ class ApiStatusesShowAction extends ApiAction * @param array $args $_REQUEST args * * @return boolean success flag - * */ - - function prepare($args) + protected function prepare(array $args=array()) { parent::prepare($args); @@ -81,11 +74,20 @@ class ApiStatusesShowAction extends ApiAction $this->notice_id = (int)$this->trimmed('id'); - if (empty($notice_id)) { - $this->notice_id = (int)$this->arg('id'); + $this->notice = Notice::getKV('id', $this->notice_id); + if (!$this->notice instanceof Notice) { + $deleted = Deleted_notice::getKV('id', $this->notice_id); + if ($deleted instanceof Deleted_notice) { + // TRANS: Client error displayed trying to show a deleted notice. + $this->clientError(_('Notice deleted.'), 410); + } + // TRANS: Client error displayed trying to show a non-existing notice. + $this->clientError(_('No such notice.'), 404); + } + if (!$this->notice->inScope($this->scoped)) { + // TRANS: Client exception thrown when trying a view a notice the user has no access to. + throw new ClientException(_('Access restricted.'), 403); } - - $this->notice = Notice::staticGet((int)$this->notice_id); return true; } @@ -95,21 +97,28 @@ class ApiStatusesShowAction extends ApiAction * * Check the format and show the notice * - * @param array $args $_REQUEST data (unused) - * * @return void */ - - function handle($args) + protected function handle() { - parent::handle($args); + parent::handle(); - if (!in_array($this->format, array('xml', 'json'))) { - $this->clientError(_('API method not found!'), $code = 404); - return; + if (!in_array($this->format, array('xml', 'json', 'atom'))) { + // TRANS: Client error displayed when coming across a non-supported API method. + $this->clientError(_('API method not found.'), 404); } - $this->showNotice(); + switch ($_SERVER['REQUEST_METHOD']) { + case 'GET': + $this->showNotice(); + break; + case 'DELETE': + $this->deleteNotice(); + break; + default: + // TRANS: Client error displayed calling an unsupported HTTP error in API status show. + $this->clientError(_('HTTP method not supported.'), 405); + } } /** @@ -117,30 +126,40 @@ class ApiStatusesShowAction extends ApiAction * * @return void */ - function showNotice() { if (!empty($this->notice)) { - if ($this->format == 'xml') { + switch ($this->format) { + case 'xml': $this->showSingleXmlStatus($this->notice); - } elseif ($this->format == 'json') { + break; + case 'json': $this->show_single_json_status($this->notice); + break; + case 'atom': + $this->showSingleAtomStatus($this->notice); + break; + default: + // TRANS: Exception thrown requesting an unsupported notice output format. + // TRANS: %s is the requested output format. + throw new Exception(sprintf(_("Unsupported format: %s."), $this->format)); } } else { - // XXX: Twitter just sets a 404 header and doens't bother // to return an err msg - $deleted = Deleted_notice::staticGet($this->notice_id); + $deleted = Deleted_notice::getKV($this->notice_id); if (!empty($deleted)) { $this->clientError( + // TRANS: Client error displayed requesting a deleted status. _('Status deleted.'), 410, $this->format ); } else { $this->clientError( + // TRANS: Client error displayed requesting a status with an invalid ID. _('No status with that ID found.'), 404, $this->format @@ -150,7 +169,7 @@ class ApiStatusesShowAction extends ApiAction } /** - * Is this action read only? + * We expose AtomPub here, so non-GET/HEAD reqs must be read/write. * * @param array $args other arguments * @@ -159,7 +178,7 @@ class ApiStatusesShowAction extends ApiAction function isReadOnly($args) { - return true; + return ($_SERVER['REQUEST_METHOD'] == 'GET' || $_SERVER['REQUEST_METHOD'] == 'HEAD'); } /** @@ -167,7 +186,6 @@ class ApiStatusesShowAction extends ApiAction * * @return string datestamp of the latest notice in the stream */ - function lastModified() { if (!empty($this->notice)) { @@ -185,7 +203,6 @@ class ApiStatusesShowAction extends ApiAction * * @return string etag */ - function etag() { if (!empty($this->notice)) { @@ -193,6 +210,7 @@ class ApiStatusesShowAction extends ApiAction return '"' . implode( ':', array($this->arg('action'), + common_user_cache_hash($this->auth_user), common_language(), $this->notice->id, strtotime($this->notice->created)) @@ -203,4 +221,31 @@ class ApiStatusesShowAction extends ApiAction return null; } + function deleteNotice() + { + if ($this->format != 'atom') { + // TRANS: Client error displayed when trying to delete a notice not using the Atom format. + $this->clientError(_('Can only delete using the Atom format.')); + } + + if (empty($this->auth_user) || + ($this->notice->profile_id != $this->auth_user->id && + !$this->auth_user->hasRight(Right::DELETEOTHERSNOTICE))) { + // TRANS: Client error displayed when a user has no rights to delete notices of other users. + $this->clientError(_('Cannot delete this notice.'), 403); + } + + if (Event::handle('StartDeleteOwnNotice', array($this->auth_user, $this->notice))) { + $this->notice->delete(); + Event::handle('EndDeleteOwnNotice', array($this->auth_user, $this->notice)); + } + + // @fixme is there better output we could do here? + + header('HTTP/1.1 200 OK'); + header('Content-Type: text/plain'); + // TRANS: Confirmation of notice deletion in API. %d is the ID (number) of the deleted notice. + print(sprintf(_('Deleted notice %d'), $this->notice->id)); + print("\n"); + } }